Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft
File:                     330092B238160780852731102A871D6304465F70.mft (raw, json)
Hash identifier:          LwPeDEC42acqxP33ZqQ2ToleQWnXbe5qIT3JS/kidRg=
Subject key identifier:   0A:22:D4:92:74:46:06:E5:C1:0A:8A:19:91:43:CA:E4:33:AB:3C:5A
Authority key identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70
Certificate issuer:       /CN=330092B238160780852731102A871D6304465F70
Certificate serial:       2BDA7153FDC80E32F258E6D2B73E04CD94945DCF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 00:04:09 +0000
Manifest this update:     Thu 23 Jul 2026 23:59:09 +0000
Manifest next update:     Sat 25 Jul 2026 03:24:09 +0000
Files and hashes:         1: 323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa (hash: BPV+6AVtXTtCqmAeTgWPqzztODjS6FnhMhNhFeIQf6s=)
                          2: 323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa (hash: HpkVwWqEXIjN3YEAY1A1C8iTWhjH8FC+NyTxqq1d2LI=)
                          3: 3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (hash: fvMMfrS6mYlNF9rFiUBs/HRENLIoPVlg2GbOLNt+atE=)
                          4: 323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa (hash: j+TaQjlpliKWuOR+ri5IrN7rmZzVKtlRC0yuzCbqi8M=)
                          5: 3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (hash: sPNvpeDzhWn+6hid5VgHhdrKErvd5aUmBzSDcwGzfnk=)
                          6: 323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa (hash: frK8PZbh3KFjoO/nYY+Eo/5swXQNC1Cp6kW9KPTWIaE=)
                          7: 323430363a366434303a3a2f33322d3332203d3e20313431303536.roa (hash: HJzfn1RAcp4KQQSREVoxhT55QfVBdfZXOSmjHed/yCk=)
                          8: 3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa (hash: /vvzo2s8vyegzc8avpsATW+wv8ripOvn0xDZkpDyRyo=)
                          9: 330092B238160780852731102A871D6304465F70.crl (hash: zrYsp1PmrPTWpnYwCKu3RwZ3dTpVUpUmKyIXATZVGTs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl
                          rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:da:71:53:fd:c8:0e:32:f2:58:e6:d2:b7:3e:04:cd:94:94:5d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330092B238160780852731102A871D6304465F70
        Validity
            Not Before: Jul 23 23:59:09 2026 GMT
            Not After : Jul 25 03:24:09 2026 GMT
        Subject: CN=0A22D492744606E5C10A8A199143CAE433AB3C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ce:af:ef:eb:0c:f0:c9:48:27:1d:95:87:a0:
                    95:ca:e5:46:47:c0:3d:66:00:13:5a:a7:9a:56:40:
                    9e:a5:27:de:89:3c:1e:66:0d:2c:39:69:57:8e:d7:
                    b7:b5:7a:fc:e1:b4:5c:7b:82:28:c6:78:ba:95:f3:
                    e6:92:cf:90:fd:d9:8f:9b:81:83:21:ce:d5:a6:f6:
                    31:a8:3e:3c:e5:a6:a0:d3:eb:08:e8:ce:e2:46:8c:
                    73:71:52:04:90:64:51:bd:2a:56:10:2f:da:00:fb:
                    f9:b5:11:92:ca:c4:14:37:9c:23:49:5c:07:30:9c:
                    69:1b:76:44:ac:5b:7e:6a:54:36:bc:56:dd:d7:a9:
                    b8:76:b8:38:cf:e3:d2:57:61:9c:e3:52:74:79:c3:
                    57:b2:68:06:dd:73:da:53:b1:69:e6:a8:ce:3c:05:
                    b3:d1:e0:27:aa:45:9c:33:4a:9d:f9:9d:28:5d:80:
                    a9:a3:5b:c1:50:6d:9e:c2:3b:5d:67:06:93:9d:95:
                    00:c9:b1:ea:25:4c:9b:95:f2:63:5e:dc:3f:80:3d:
                    4d:67:fc:0a:16:09:87:05:b7:06:2c:bf:bf:a2:83:
                    9b:93:fe:f1:9a:90:ab:cd:ab:ab:36:d7:3f:20:fc:
                    cf:67:9a:ce:1a:c7:b9:7c:f6:b4:4b:b8:a0:15:fb:
                    e5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:22:D4:92:74:46:06:E5:C1:0A:8A:19:91:43:CA:E4:33:AB:3C:5A
            X509v3 Authority Key Identifier:
                keyid:33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:da:3e:a9:2f:db:a1:83:67:96:0a:04:45:2e:fd:7c:20:38:
         a1:fc:de:95:0d:42:ca:28:de:61:82:41:17:26:cd:cf:0c:28:
         b5:d1:ed:9e:1a:be:6c:65:08:80:23:86:1d:bf:a1:36:b1:95:
         a1:e4:ea:fe:d0:f5:ea:e6:b4:5d:bc:20:13:94:a8:fb:18:e9:
         5a:ed:cb:6b:b9:c8:51:0d:55:83:e6:e4:47:37:4d:3b:cc:f0:
         e9:f9:f0:bc:9b:51:a7:67:07:2e:0b:d7:08:d9:10:11:ce:1b:
         82:a7:cd:75:58:c1:72:a3:ae:3a:4f:54:f2:d4:af:79:80:28:
         00:6b:84:f0:d4:42:3f:65:c7:07:d1:b9:9c:a1:d2:29:1e:95:
         b5:1d:88:2b:2f:ac:07:07:fe:c1:d5:e8:72:b4:ae:48:1c:bf:
         88:4a:74:c7:cc:13:1e:b4:14:9b:85:ee:89:d2:c0:40:3b:26:
         ea:f5:de:31:03:72:ec:d3:b8:11:8b:c4:cf:5a:b9:ef:a7:0c:
         91:14:e6:fa:61:e1:30:45:64:83:1b:93:86:9a:08:ae:d0:b1:
         30:c4:86:ec:7c:e2:e8:34:74:ee:0d:34:09:8e:ae:af:cc:f7:
         83:7d:42:cc:2d:eb:d3:3e:06:f2:b0:b9:46:4c:28:8f:fe:f0:
         f2:0d:ce:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:17 2026 by rpki-client